Maybe/app/models/user.rb

class User < ApplicationRecord
  has_secure_password
  
  belongs_to :family

  validates :email, presence: true, uniqueness: true
  normalizes :email, with: -> (email) { email.strip.downcase }

  generates_token_for :password_reset, expires_in: 15.minutes do
    password_salt&.last(10)
  end
end